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DETAILED ACTION 



Specification 



1 . The use of the trademark WebTV® has been noted in this application. It should 
be capitalized wherever it appears and be accompanied by the generic terminology. 

Although the use of trademarks is permissible in patent applications, the 
proprietary nature of the marks should be respected and every effort made to prevent 
their use in any manner which might adversely affect their validity as trademarks. 

2. The lengthy specification has not been checked to the extent necessary to 
determine the presence of all possible minor errors. Applicant's cooperation is 
requested in correcting any errors of which applicant may become aware in the 
specification. 

Ciaim Objections 



3. Claims 2-6, 8-1 5, and 1 7-44 are objected to because of the following 
informalities: The above claims each end with a semicolon. All claims must end with a 
period. Appropriate correction is required. 
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Claim Rejections - 35 USC §112 

4. The following is a quotation of the second paragraph of 35 U.S.C. 1 1 2: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

5. Claims 1-45 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Regarding claims 1 , 7, 27, and 42, the phrase "for example" or "e.g." renders the 
claims indefinite because it is unclear whether the limitation(s) following the phrase are 
part of the claimed invention. See MPEP § 21 73.05(d). 

Regarding claims 1 , 4, 6, 7, 16, and 29, the phrase "such as" renders the claims 
indefinite because it is unclear whether the limitations following the phrase are part of 
the claimed invention. See MPEP § 2173.05(d). 

Further in reference to Claims 1 and 7, the limitation "or (other compromise)" is 
generally unclear. There is insufficient antecedent basis for the limitation "the system 
being protected" in line 4 of each claim. There is insufficient antecedent basis for the 
limitation "the invention" in line 5 of each claim. The use of the parenthetical limitations 
"referred to as the protected-system"; "a secure communications & processing front-end 
signal control system"; "at the signal level"; "from the protected-system"; "where the 
protected-system is a manned system"; "and store in any desired format"; "of any type"; 
"for process-control and telemetry type applications"; "where the protected-system is an 
unmanned/autonomous system"; "based on the external command and request 
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processing results"; "or unauthorized command sequences"; "and remaining in"; "and 
updates"; and "at best, marginally effective" renders the scope of the claims indefinite, 
as it is unclear whether the limitations in parentheses are included in the claimed 
invention. The use of the phrases "and like signals" and "etc." renders the claims 
indefinite because the claims include elements not actually disclosed, thereby rendering 
the scope of the claims unascertainable. See MPEP § 2173.05(d). Further, regarding * 
the limitation "whereby a simple embodiment of this step is to make the monitor (e.g. 
VGA/SVGA output) signal of the invention viewable on a subset of the raster display 
(monitor) of the protected-system", it is unclear whether this limitation is part of the 
claimed invention, as it appears to describe an example embodiment rather than a 
defining embodiment. The above limitations render claims 1 and 7 indefinite. 

In reference to Claim 2, the use of the parenthetical limitation "the secure 
communications & processing front-end signal control system" renders the scope of the 
claim indefinite, as it is unclear whether the limitations in parentheses are included in 
the claimed invention. 

In reference to Claim 3, the use of the parenthetical limitations "or user 
generated" and "information preserving data transform" renders the scope of the claim 
indefinite, as it is unclear whether the limitations in parentheses are included in the 
claimed invention. Further, the language "any commercially available (or user 
generated) process including" renders the claim indefinite because it is not clear exactly 
what processes are encompassed. See MPEP § 2173.05(h). Further, the use of the 
phrase "or like processes" renders the claim indefinite because the claims include 
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elements not actually disclosed, thereby rendering the scope of the claims 
unascertainable. See MPEP § 2173.05(d). 

In reference to Claim 4, the use of the parenthetical limitation "the secure 
communications & processing front-end signal control system" renders the scope of the 
claim indefinite, as it is unclear whether the limitations in parentheses are included in 
the claimed invention. Further, there is insufficient antecedent basis in the claims for 
the recited limitation "the repository". 

Claim 5 recites the limitation "the expansion-bus". There is insufficient 
antecedent basis for this limitation in the claims. 

In reference to Claim 8, the use of the phrase "and like devices" renders the 
claim indefinite because the claims include elements not actually disclosed, thereby 
rendering the scope of the claims unascertainable. See MPEP § 2173.05(d). Further, 
the language "selected from a group of computer hardware devices, including" renders 
the claim indefinite because it is not clear exactly what hardware devices are 
encompassed by the group. See MPEP § 2173.05(h). 

In reference to Claim 9, the use of the parenthetical limitation "the secure 
communications & processing front-end signal control system" renders the scope of the 
claim indefinite, as it is unclear whether the limitations in parentheses are included in 
the claimed invention. Further, there is insufficient antecedent basis in the claims for 
the recited limitation "the intermediate domain device". 

Claim 10 recites the limitation "said intermediate domain device". There is 
insufficient antecedent basis for this limitation in the claims. Further, the language 
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"selected from a group of computer hardware devices, including" renders the claim 
indefinite because it is not clear exactly what hardware devices are encompassed by 
the group. See MPEP § 2173.05(h). 

Claim 1 1 recites the limitation "the expansion-bus". There is insufficient 
antecedent basis for this limitation in the claims. 

In reference to Claim 12, the use of the parenthetical limitations "a secure 
communications & processing front-end signal control system" and "up/down" renders 
the scope of the claim indefinite, as it is unclear whether the limitations in parentheses 
are included in the claimed invention. Further, there is insufficient antecedent basis for 
the limitation "the expansion-bus" in the claims. 

In reference to Claim 13, the use of the parenthetical limitation "a secure 
communications & processing front-end signal control system" renders the scope of the 
claim indefinite, as it is unclear whether the limitations in parentheses are included in 
the claimed invention. Further, the limitation "a plurality of the invention" is generally 
unclear. 

In reference to Claim 14, the use of the parenthetical limitations "a secure 
communications & processing front-end signal control system" and "of each invention" 
renders the scope of the claim indefinite, as it is unclear whether the limitations in 
parentheses are included in the claimed invention. Further, the limitations "a network of 
systems, each protected by an embodiment of the invention form an automatic self- 
cleansing network"; "via the embodiment of the means (of each invention) to 
automatically return to a predefined secure state"; and "the plurality of the invention 
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forms a secure network overlay" are generally unclear. Still further, there is insufficient 
antecedent basis for the limitation "the network of protected-systems". 

Claim 15 recites "The plurality of claim 14"; however, Claim 14 is directed to a 
system. Further, the use of the parenthetical limitations "of the invention", "at the signal- 
level", and "i.e. non DIN-authentication-capable" renders the scope of the claim 
indefinite, as it is unclear whether the limitations in parentheses are included in the 
claimed invention. 

In reference to Claim 16, the use of the parenthetical limitation "a secure 
communications & processing front-end signal control system" renders the scope of the 
claim indefinite, as it is unclear whether the limitations in parentheses are included in 
the claimed invention. Further, the limitation "user action/approval" is unclear, as the 
further limitation "such approval" makes it unclear as to whether the user action must be 
an approval. 

Claim 17 recites the limitations "the initial data set", "the intermediate domain 
device", and "the second data set". There is insufficient antecedent basis for these 
limitations in the claims. 

In reference to Claim 19, the use of the parenthetical limitations "from the 
protected system" and "secure communications & processing front-end signal control 
systems" renders the scope of the claim indefinite, as it is unclear whether the 
limitations in parentheses are included in the claimed invention. 

Claim 20 recites the limitations "said intermediate domain device" and "the bus". 
There is insufficient antecedent basis for these limitations in the claims. Further, the 
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language "selected from a group of computer hardware devices, including" renders the 
claim indefinite because it is not clear exactly what hardware devices are encompassed 
by the group. See MPEP § 2173.05(h). Additionally, the use of the trademark WebTV® 
renders the claim indefinite because the trademark cannot be used properly to identify 
any particular material or product. See MPEP § 2173.05(u), and MPEP § 608.01 (v) 
regarding proper use of trademarks. Still further, it is unclear what is encompassed by 
the limitation "a plurality of such devices". 

Claim 21 recites the limitation "the intermediate domain device". There is 
insufficient antecedent basis for this limitation in the claims. 

Claim 22 recites the limitations "said means for connecting" and "extracting and 
means for passing, means for purging, means for resetting". There is insufficient 
antecedent basis for these limitations in the claims. 

In reference to Claim 26, the use of the parenthetical limitations "representing 
DIN's or labeled data sets" and "application specific" renders the scope of the claim 
indefinite, as it is unclear whether the limitations in parentheses are included in the 
claimed invention. Further, there is insufficient antecedent basis for the limitations "the 
means to generate, transceive, and process" in the claims. Additionally, the limitation 
"encypherment is an example of such means", renders the claim indefinite because it is 
unclear whether the limitation is part of the claimed invention. See MPEP § 2173.05(d). 

Claim 27 recites the limitation "limitations of binary computation". It is unclear 
what is meant by this limitation. Further, the language "any telecommunication medium 
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including" renders the claim indefinite because it is not clear exactly what 
telecommunication media are encompassed. See MPEP § 2173.05(h). 

In reference to Claim 28, the use of the parenthetical limitation "due to the means 
for purging, and means for resetting" renders the scope of the claim indefinite, as it is 
unclear whether the limitations in parentheses are included in the claimed invention. 
Further, there is insufficient antecedent basis for the limitations "the means for purging, 
and means for resetting" and "the means to intrinsically and automatically eliminate" in 
the claims. Additionally, it is unclear what is encompassed by the limitation "a plurality 
of such systems". Still further, it is unclear whether the limitation "the system" in line 4 
of the claim is intended to refer to the protected-system or the system as a whole. 

Claim 29 recites the limitation "the means for connecting". There is insufficient 
antecedent basis for this limitation in the claims. Further, it is unclear whether the 
limitation "the system" in line 2 of the claim is intended to refer to the protected-system 
or the system as a whole. 

In reference to Claim 30, the use of the parenthetical limitations "based on 
parameters including type, rate, labels" and "including data sets" renders the scope of 
the claim indefinite, as it is unclear whether the limitations in parentheses are included 
in the claimed invention. Further, there is insufficient antecedent basis for the 
limitations "the means for connecting", "the DIN of the system", and "the label of the 
signal traffic" in the claims. Additionally, it is unclear whether the limitation "the system" 
in line 3 of the claim is intended to refer to the protected-system or the system as a 
whole. 
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In reference to Claim 31 , it is unclear whether the limitation "the system" in line 3 
of the claim is intended to refer to the protected-system or the system as a whole. 

In reference to Claim 32, the use of the parenthetical limitation "in a network of 
like systems" renders the scope of the claim indefinite, as it is unclear whether the 
limitations in parentheses are included in the claimed invention. Further, there is 
insufficient antecedent basis for the limitation "the means to generate" in the claims. 
Additionally, the limitation "a like systems" in generally unclear, and it is unclear what 
the subject of the limitation "transmit such information" is. 

In reference to Claim 33, the use of the parenthetical limitations "in a network of 
like systems" and "based on results of such processing" renders the scope of the claim 
indefinite, as it is unclear whether the limitations in parentheses are included in the 
claimed invention. Further, there is insufficient antecedent basis for the limitation "the 
means to receive device status" in the claims. Additionally, the limitation "relative to the 
network of like systems" is generally unclear. 

Claim 34 recites the limitations "the means for connecting", "the intermediate 
domain device", "the expansion-bus", and "the host-protected system". There is 
insufficient antecedent basis for these limitations in the claims. Further, the use of the 
parenthetical limitation "as an add-in card" renders the scope of the claim indefinite, as it 
is unclear whether the limitations in parentheses are included in the claimed invention. 

In reference to Claim 36, the use of the parenthetical limitation "of such 
processing and execution" renders the scope of the claim indefinite, as it is unclear 
whether the limitations in parentheses are included in the claimed invention. Further, 
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there is insufficient antecedent basis for the limitations "the means for securely passing" 
and "the results" in the claims. Further, it is unclear what is intended by the use of 
quotation marks around the phrase "executable code". 

In reference to Claim 37, the use of the parenthetical limitation "for transmission" 
renders the scope of the claim indefinite, as it is unclear whether the limitations in 
parentheses are included in the claimed invention. Further, it is unclear whether the 
limitation "the system" in line 3 of the claim is intended to refer to the protected-system 
or the system as a whole. Additionally, there is insufficient antecedent basis for the 
limitation "the transmitting system" in the claims. 

In reference to Claim 38, the use of the parenthetical limitation "that are to be 
transmitted to external destinations" renders the scope of the claim indefinite, as it is 
unclear whether the limitations in parentheses are included in the claimed invention. 
Further, there is insufficient antecedent basis for the limitations "the means for 
connecting" and "the destination" in the claims. 

In reference to Claim 39, the use of the parenthetical limitation "to the protected 
domain" renders the scope of the claim indefinite, as it is unclear whether the limitations 
in parentheses are included in the claimed invention. Further, there is insufficient 
antecedent basis for the limitations "the means for securely transferring" and "the 
protected domain" in the claims. 

Claim 40 recites the limitation "the protected domain". There is insufficient 
antecedent basis for this limitation in the claims. Further, it is unclear whether the 
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limitation "the system" in line 2 of the claim is intended to refer to the protected-system 
or the system as a whole. 

In reference to Claim 41, the use of the parenthetical limitation "as determined by 
specific application parameters" renders the scope of the claim indefinite, as it is unclear 
whether the limitations in parentheses are included in the claimed invention. Further, 
there is insufficient antecedent basis for the limitation "the means for securely passing" 
in the claims. Additionally, the use of the phrase "or like network device" renders the 
claim indefinite because the claims include elements not actually disclosed, thereby 
rendering the scope of the claims unascertainable. See MPEP § 2173.05(d). 

In reference to Claim 42, the use of the parenthetical limitation "as defined by 
specific applications" renders the scope of the claim indefinite, as it is unclear whether 
the limitations in parentheses are included in the claimed invention. Further, the 
limitation "adjacent like-devices" in generally unclear. 

Claim 43 recites the limitation "the means for connecting". There is insufficient 
antecedent basis for this limitation in the claims. 

Claim 44 recites the limitation "the means to control the transmission". There is 
insufficient antecedent basis for this limitation in the claims. Further, it is unclear 
whether the limitation "the system" in line 3 of the claim is intended to refer to the 
protected-system or the system as a whole. 

Claim 45 recites the limitation "the means to buffer and decontaminate". There is 
insufficient antecedent basis for this limitation in the claims. Further, it is unclear 
whether the limitation "the system" in lines 6 and 8 of the claim is intended to refer to the 
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protected-system or the system as a whole. Additionally, it is unclear what is intended 
by the use of quotation marks around the phrases "protected system", "server", and 
"client". 

Any claim not specifically referred to above is rejected due to its dependence on 
a rejected base claim. 

For purposes of interpreting the prior art, all exemplary claim language, 
parenthetical limitations, and "whereby" clauses have been given no patentable weight. 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1-14, 16-24, 28, 29, 34-36, and 38-45 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Schnurer et al, US Patent 5842002, in view of Li et 
al, US Patent 61 191 65. 

In reference to Claim 1 , Schnurer discloses a method that includes inserting a 
front-end signal control system between a system being protected and external signal 
sources (Figure 1 , Emulation Box 48), allowing the protected system to capture the 
output signals from the control system (see column 7, lines 28-35), providing a signal 
path between the protected system and the control system (column 6, lines 38-40), 
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processing commands and requests while confining external signals in the control 
system (column 7, lines 25-37; also lines 15-18), and returning the control system to a 
predefined state (column 8, lines 54-58). However, Schnurer does not explicitly 
disclose viewing the processing of external signals taking place inside the control 
system. 

Li discloses a system that includes a proxy server and allows an end user to view 
the status of virus scanning and other security measures taking place on the proxy 
server (column 4, lines 47-54). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method of 
Schnurer by allowing the user to view the status of processing on the intermediary 
server, in order to allow a client to better monitor the connection between the client and 
a remote site (see Li, column 2, lines 18-31). 

In reference to Claim 2, Schnurer further discloses connection of the control 
system to the protected system (column 6, lines 38-40). 

In reference to Claim 3, Schnurer further discloses the protected system 
capturing the output signals of the control system (see column 7, lines 28-35). 

In reference to Claim 4, Schnurer further discloses processing external 
commands and requests (column 7, lines 25-27). 

In reference to Claim 5, Schnurer further discloses connecting the control system 
to a bus (column 6, lines 9-13, where the device can be implemented as a board level 
CPU). 
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In reference to Claim 6, Schnurer further discloses that the control system can be 
returned to a predefined state automatically or manually (column 8, lines 27-35 and 54- 
58). 

In reference to Claim 17, Schnurer further discloses selecting a data set, 
transferring the data set to an intermediate device (column 6, lines 27-28, where an 
incoming data stream is read), and processing the data set (see, for example, column 7, 
lines 44-52). 

In reference to Claim 18, Schnurer further discloses filtering the data set (column 
7, lines 27-28, where the data is split between two paths). 

Claim 7 is directed to a system that corresponds substantially to the method of 
Claim 1 , and is rejected by a similar rationale. 

In reference to Claims 8, 10, and 20, Schnurer further discloses a device 
embodied as a computer hardware device (column 6, lines 9-13). 

In reference to Claims 9 and 21 , Li further discloses means for identifying a 
system (column 3, lines 56-65). 

In reference to Claims 11,12, and 23, Schnurer further discloses means of the 
control system connected to a bus (column 6, lines 9-13, where the device can be 
implemented as a board level CPU). 

In reference to Claims 13 and 23, Schnurer further discloses a system including 
a plurality of control systems (Figure 4, where there are multiple Trapping Devices 10). 
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In reference to Claim 14, Schnurer further discloses a network of systems, each 
protected by a control system (Figure 4). 

In reference to Claims 16 and 19, Schnurer further discloses a filter function 
(column 7, lines 27-28). 

In reference to Claim 24, Schnurer further discloses a plurality of control systems 
(Figure 4) and Li further discloses means for identifying authorized devices (column 3, 
lines 56-65). 

In reference to Claim 28, Schnurer further discloses a plurality of systems 
(Figures 3 and 4). 

In reference to Claim 29, Schnurer further discloses an initialization process (see 
column 7, lines 19-24). 

In reference to Claim 34, Schnurer further discloses the control system embodied 
as a single board device connected to a bus (column 6, lines 9-13, where the device 
can be implemented as a board level CPU). 

In reference to Claim 35, Schnurer further discloses the protected system within 
the larger system (see Figure 1 ). 

In reference to Claims 36 and 39, Schnurer further discloses means for secure 
processing of executable code received from an external data source (column 7, lines 
3-18). 

In reference to Claims 38 and 40, Schnurer further discloses processing data 
sets and deleting files that are not authenticated as safe (column 8, lines 26-33). 
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In reference to Claim 41 , Schnurer discloses that the protected system is a 
network device (column 6, lines 41-62) and that data units are analyzed (column 7, lines 
12-15) and improper data units are identified and deleted (column 8, lines 26-33). 

In reference to Claim 42, Li further discloses generating and transmitting status 
information (column 5, lines 8-11 and 16-23). 

In reference to Claim 43, Li further discloses monitoring incoming data units 
(column 4, lines 24-39). 

In reference to Claim 44, Schnurer further discloses controlling transmission of 
data units to external systems (see column 6, lines 41-62). 

In reference to Claim 45, Schnurer further discloses decontaminating incoming 
data streams (column 7, lines 25-32). 

8. Claims 15, 25-27, 30-33, and 37 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schnurer in view of Li, and further in view of Aziz et al, US Patent 
6119234. 

In reference to Claim 15, Schnurer in view of Li discloses everything as applied 
above to Claim 14. However, Schnurer as modified above does not explicitly disclose 
the use of Device Identification Number authentication capability. Aziz discloses a 
proxy system using client-configured addresses and keys for intermediate device 
access (column 4, lines 1-8; see also column 7, lines 28-38 and column 10, lines 35- 
41 ). Therefore, it would have been obvious for one of ordinary skill in the art at the time 
the invention was made to modify the system of Schnurer and Li by including the use of 
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DIN authentication, in order to allow for dynamic configuration for secure 
communications (see Aziz, column 4, lines 16-26). 

In reference to Claims 25 and 26, Schnurer in view of Li discloses everything as 
applied above to Claim 24. However, Schnurer as modified above does not explicitly 
disclose the use of DIN authentication and data set labeling capabilities. Aziz discloses 
a proxy system using client-configured addresses and keys for intermediate device 
access (column 4, lines 1-8; see also column 7, lines 28-38 and column 10, lines 35- 
41 ). Therefore, it would have been obvious for one of ordinary skill in the art at the time 
the invention was made to modify the system of Schnurer and Li by including the use of 
DIN authentication, in order to allow for dynamic configuration for secure 
communications (see Aziz, column 4, lines 16-26). 

In reference to Claim 27 Schnurer further discloses a telecommunication medium 
(column 6, lines 50-54). 

In reference to Claim 30 and 37, Schnurer in view of Li discloses everything as 
applied above to Claim 7. Schnurer further discloses controlling the flow of signal traffic 
(for example, see column 7, lines 25-33). However, neither Schnurer nor Li explicitly 
discloses the use of the DIN in controlling signal flow. Aziz discloses a proxy system 
using client-configured addresses and keys for intermediate device access (column 4, 
lines 1-8; see also column 7, lines 28-38 and column 10, lines 35-41). Therefore, it 
would have been obvious for one of ordinary skill in the art at the time the invention was 
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made to modify the system of Schnurer and Li by including the use of DINs in 
controlling signal flow, in order to allow for dynamic configuration for secure 
communications (see Aziz, column 4, lines 16-26). 

In reference to Claim 31, Schnurer further discloses deriving the origin of signal 
traffic (see column 6, lines 24-35). 

In reference to Claims 32 and 33, Li further discloses generating, transmitting, 
and receiving status information (column 5, lines 8-11 and 16-23). 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Ji et al, US Patent 5623600, discloses a proxy device interposed between 
a client and a server, which eliminates viruses from data before the data is 
transferred to the client system. 

b. Ji et al, US Patent 5889943, discloses a node that performs virus 
detection and data analysis. 

c. Bull et al, US Patent 60651 1 8, discloses a device that isolates 
questionable program modules before they are passed to an end user computer 
system. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Zachary A Davis whose telephone number is (571 ) 272- 
3870. The examiner can normally be reached on weekdays 8:30-6:00, alternate 
Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on (571 ) 272-3868. The fax phone 
number for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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